path: root/asn1/x509if/x509if.cnf

# x509if.cnf
# X509IF conformation file

#.IMPORT ../x509sat/x509sat-exp.cnf

#.MODULE_IMPORT
DirectoryAbstractService  dap

#.OMIT_ASSIGNMENT
ObjectClassKind
#.END
#.CLASS ATTRIBUTE
&derivation            ClassReference ATTRIBUTE
&Type
&equality-match        ClassReference MATCHING-RULE
&ordering-match        ClassReference MATCHING-RULE
&substrings-match      ClassReference MATCHING-RULE
&single-valued         BooleanType
&collective            BooleanType
&no-user-modification  BooleanType
&usage                 TypeReference AttributeUsage
&id                    ObjectIdentifierType
#.END
#.CLASS CONTEXT
&Type
&Assertion
&id         ObjectIdentifierType
#.END
#.CLASS OBJECT-CLASS
&Superclasses         ClassReference OBJECT-CLASS
&kind                 TypeReference ObjectClassKind
&MandatoryAttributes  ClassReference ATTRIBUTE
&OptionalAttributes   ClassReference ATTRIBUTE
&id                   ObjectIdentifierType
#.END

#.CLASS MATCHING-RESTRICTION
&Restriction
&Rules        _FixedTypeValueSetFieldSpec
&id           ObjectIdentifierType
#.END

#.CLASS MATCHING-RULE
&ParentMatchingRules   ClassReference MATCHING-RULE
&AssertionType
&uniqueMatchIndicator  ClassReference ATTRIBUTE
&id                    ObjectIdentifierType
#.END

#.EXPORTS
OBJECT-CLASS
ATTRIBUTE
MATCHING-RULE
MAPPING-BASED-MATCHING
NAME-FORM
STRUCTURE-RULE
CONTENT-RULE
CONTEXT
SEARCH-RULE
MATCHING-RESTRICTION
AllowedSubset
Attribute
AttributeCombination
AttributeType
AttributeTypeAndDistinguishedValue
AttributeTypeAssertion
AttributeUsage
AttributeValue
AttributeValueAssertion
#BaseDistance
ChopSpecification
Context
ContextAssertion
ContextCombination
ContextProfile
ControlOptions
DistinguishedName
DITContentRule
DITContextUse
DITStructureRule
EntryLimit
ImposedSubset
LocalName
Mapping
MatchingUse
MRMapping
MRSubstitution
Name
Refinement
RelativeDistinguishedName
RelaxationPolicy
RDNSequence
RequestAttribute
ResultAttribute
RuleIdentifier
SearchRule
SearchRuleDescription
SearchRuleId
SubtreeSpecification

#.PDU
DistinguishedName

#.NO_EMIT

#.TYPE_RENAME
AttributeTypeAndDistinguishedValue/valuesWithContext	T_valWithContext
AttributeTypeAndDistinguishedValue/valuesWithContext/_item	T_valWithContext_item
ChopSpecification/specificExclusions			T_chopSpecificExclusions
ChopSpecification/specificExclusions/_item		T_chopSpecificExclusions_item

#.FIELD_RENAME
AttributeTypeAssertion/assertedContexts		ata_assertedContexts
AttributeTypeAndDistinguishedValue/value		atadv_value
AttributeTypeAndDistinguishedValue/valuesWithContext	valueswithContext
AttributeTypeAndDistinguishedValue/valuesWithContext/_item	valueswithContext_item
ChopSpecification/specificExclusions			chopSpecificExclusions
ChopSpecification/specificExclusions/_item		chopSpecificExclusions_item
Refinement/and			refinement_and
Refinement/and/_item		refinement_and_item
Refinement/not			refinement_not
Refinement/or			refinement_or
Refinement/or/_item		refinement_or_item
ContextAssertion/contextType		ca_contextType
ContextAssertion/contextValues		ca_contextValues
ContextAssertion/contextValues/_item	ca_contextValues_item
ContextCombination/not		contextcombination_not
ContextCombination/and		contextcombination_and
ContextCombination/and/_item	contextcombination_and_item
ContextCombination/or		contextcombination_or
ContextCombination/or/_item	contextcombination_or_item
RelaxationPolicy/maximum	maximum_relaxation
RelaxationPolicy/minimum	minimum_relaxation
RequestAttribute/defaultValues/_item/values		ra_values
RequestAttribute/defaultValues/_item/values/_item	ra_values_item
RequestAttribute/selectedValues				ra_selectedValues
RequestAttribute/selectedValues/_item			ra_selectedValues_item

#.REGISTER
DistinguishedName	B	"2.5.4.1"	"id-at-aliasedEntryName"
DistinguishedName	B	"2.5.4.31"	"id-at-member"
DistinguishedName	B	"2.5.4.32"	"id-at-owner"
DistinguishedName	B	"2.5.4.33"	"id-at-roleOccupant"
DistinguishedName	B	"2.5.4.34"	"id-at-seeAlso"
DistinguishedName	B	"2.5.4.49"	"id-at-distinguishedName"

DistinguishedName	B	"2.5.18.3"	"id-oa-creatorsName"
DistinguishedName	B	"2.5.18.4"	"id-oa-modifiersName"
SubtreeSpecification 	B 	"2.5.18.6" 	"id-oa-subtreeSpecification"
DistinguishedName	B	"2.5.18.10"	"id-oa-subschemaSubentry"
DistinguishedName	B	"2.5.18.11"	"id-oa-accessControlSubentry"
DistinguishedName	B	"2.5.18.12"	"id-oa-collectiveAttributeSubentry"
DistinguishedName	B	"2.5.18.13"	"id-oa-contextDefaultSubentry"
HierarchyLevel		B	"2.5.18.17"	"id-oa-hierarchyLevel"
HierarchyBelow		B	"2.5.18.18"	"iid-oa-hierarchyBelow"
# X402 - see master list in acp133.cnf
DistinguishedName B "2.6.5.2.5" "id-at-mhs-message-store-dn"
DistinguishedName B "2.6.5.2.14" "id-at-mhs-dl-related-lists"

# ACP133 - see master list in acp133.cnf
DistinguishedName B "2.16.840.1.101.2.2.1.3" "id-at-alternateRecipient"
DistinguishedName B "2.16.840.1.101.2.2.1.4" "id-at-associatedOrganization"
DistinguishedName B "2.16.840.1.101.2.2.1.6" "id-at-associatedPLA"
DistinguishedName B "2.16.840.1.101.2.2.1.49" "id-at-aliasPointer"
DistinguishedName B "2.16.840.1.101.2.2.1.61" "id-at-listPointer"
DistinguishedName B "2.16.840.1.101.2.2.1.110" "id-at-administrator"
DistinguishedName B "2.16.840.1.101.2.2.1.111" "id-at-aigsExpanded"
DistinguishedName B "2.16.840.1.101.2.2.1.113" "id-at-associatedAL"
DistinguishedName B "2.16.840.1.101.2.2.1.114" "id-at-copyMember"
DistinguishedName B "2.16.840.1.101.2.2.1.117" "id-at-guard"
DistinguishedName B "2.16.840.1.101.2.2.1.121" "id-at-networkDN"
DistinguishedName B "2.16.840.1.101.2.2.1.138" "id-at-plasServed"
DistinguishedName B "2.16.840.1.101.2.2.1.139" "id-at-deployed"
DistinguishedName B "2.16.840.1.101.2.2.1.140" "id-at-garrison"
DistinguishedName B "2.16.840.1.101.2.2.1.184" "id-at-aCPDutyOfficer"
DistinguishedName B "2.16.840.1.101.2.2.1.188" "id-at-primaryMember"



#.FN_PARS ContextAssertion/contextType
  FN_VARIANT = _str  HF_INDEX = hf_x509if_object_identifier_id  VAL_PTR = &actx->external.direct_reference

#.FN_BODY ContextAssertion/contextValues/_item
  offset=call_ber_oid_callback(actx->external.direct_reference, tvb, offset, actx->pinfo, tree, NULL);

#.FN_PARS AttributeTypeAndDistinguishedValue/type
  FN_VARIANT = _str  HF_INDEX = hf_x509if_object_identifier_id  VAL_PTR = &actx->external.direct_reference

#.FN_BODY AttributeTypeAndDistinguishedValue/type
  const char *fmt;
  const char *name;

  %(DEFAULT_BODY)s

  if(actx->external.direct_reference) {
    /* see if we can find a nice name */
    name = oid_resolved_from_string(wmem_packet_scope(), actx->external.direct_reference);
    if(!name) name = actx->external.direct_reference;

    if(last_rdn) { /* append it to the RDN */
      g_strlcat(last_rdn, name, MAX_RDN_STR_LEN);
      g_strlcat(last_rdn, "=", MAX_RDN_STR_LEN);

     /* append it to the tree */
     proto_item_append_text(tree, " (%%s=", name);
    } else if(doing_attr) {
      /* append it to the parent item */
      proto_item_append_text(tree, " (%%s)", name);
    }

    if((fmt = val_to_str_const(hf_index, fmt_vals, "")) && *fmt) {
      /* we have a format */
      last_ava = (char *)wmem_alloc(wmem_packet_scope(), MAX_AVA_STR_LEN); *last_ava = '\0';
      register_frame_end_routine (actx->pinfo, x509if_frame_end);

      g_snprintf(last_ava, MAX_AVA_STR_LEN, "%%s %%s", name, fmt);

      proto_item_append_text(tree, " %%s", last_ava);

    }
  }

#.FN_BODY AttributeTypeAndDistinguishedValue/value
  int old_offset = offset;
  tvbuff_t	*out_tvb;
  char  	*value = NULL;
  const char 	*fmt;
  const char	*name = NULL;
  const char    *orig_oid = actx->external.direct_reference;

  offset=call_ber_oid_callback(actx->external.direct_reference, tvb, offset, actx->pinfo, tree, NULL);

  /* in dissecting the value we may have overridden the OID of the value - which is
     a problem if there are multiple values */
  actx->external.direct_reference = orig_oid;

  /* try and dissect as a string */
  dissect_ber_octet_string(FALSE, actx, NULL, tvb, old_offset, hf_x509if_any_string, &out_tvb);

  /* should also try and dissect as an OID and integer */
  /* of course, if I can look up the syntax .... */

  if(out_tvb) {
    /* it was a string - format it */
    value = tvb_format_text(out_tvb, 0, tvb_reported_length(out_tvb));

    if(last_rdn) {
      g_strlcat(last_rdn, value, MAX_RDN_STR_LEN);

      /* append it to the tree*/
      proto_item_append_text(tree, "%%s)", value);
    }

    if((fmt = val_to_str_const(ava_hf_index, fmt_vals, "")) && *fmt) {
      /* we have a format */

      if (!last_ava) {
        last_ava = (char *)wmem_alloc(wmem_packet_scope(), MAX_AVA_STR_LEN);
      }

      if(!(name = oid_resolved_from_string(wmem_packet_scope(), actx->external.direct_reference)))
        name = actx->external.direct_reference;
      g_snprintf(last_ava, MAX_AVA_STR_LEN, "%%s %%s %%s", name, fmt, value);

      proto_item_append_text(tree, " %%s", last_ava);

    }
  }

#.FN_PARS RequestAttribute/attributeType
  FN_VARIANT = _str  HF_INDEX = hf_x509if_object_identifier_id  VAL_PTR = &actx->external.direct_reference

#.FN_BODY RequestAttribute/selectedValues/_item
  offset=call_ber_oid_callback(actx->external.direct_reference, tvb, offset, actx->pinfo, tree, NULL);

#.FN_PARS RequestAttribute/defaultValues/_item/entryType
  FN_VARIANT = _str  HF_INDEX = hf_x509if_object_identifier_id  VAL_PTR = &actx->external.direct_reference

#.FN_BODY RequestAttribute/defaultValues/_item/values/_item
  offset=call_ber_oid_callback(actx->external.direct_reference, tvb, offset, actx->pinfo, tree, NULL);

#.FN_BODY Attribute/valuesWithContext/_item/value
  offset=call_ber_oid_callback("unknown", tvb, offset, actx->pinfo, tree, NULL);

#.FN_PARS ResultAttribute/attributeType
  FN_VARIANT = _str  HF_INDEX = hf_x509if_object_identifier_id  VAL_PTR = &actx->external.direct_reference

#.FN_BODY ResultAttribute/outputValues/selectedValues/_item
  offset=call_ber_oid_callback(actx->external.direct_reference, tvb, offset, actx->pinfo, tree, NULL);

#.FN_PARS Context/contextType
  FN_VARIANT = _str  HF_INDEX = hf_x509if_object_identifier_id  VAL_PTR = &actx->external.direct_reference

#.FN_BODY Context/contextValues/_item
  offset=call_ber_oid_callback(actx->external.direct_reference, tvb, offset, actx->pinfo, tree, NULL);

#.FN_PARS AttributeType
  FN_VARIANT = _str  HF_INDEX = hf_x509if_object_identifier_id  VAL_PTR = &actx->external.direct_reference

#.FN_BODY AttributeValue
  offset=call_ber_oid_callback(actx->external.direct_reference, tvb, offset, actx->pinfo, tree, NULL);

#.FN_PARS AttributeValueAssertion/type
  FN_VARIANT = _str  HF_INDEX = hf_x509if_object_identifier_id  VAL_PTR = &actx->external.direct_reference

#.FN_BODY AttributeValueAssertion/assertion
  offset=call_ber_oid_callback(actx->external.direct_reference, tvb, offset, actx->pinfo, tree, NULL);

#.FN_PARS Attribute/type
  FN_VARIANT = _str  HF_INDEX = hf_x509if_object_identifier_id  VAL_PTR = &actx->external.direct_reference

#.FN_BODY Attribute/values/_item
  offset=call_ber_oid_callback(actx->external.direct_reference, tvb, offset, actx->pinfo, tree, NULL);

#.FN_PARS ContextProfile/contextType
  FN_VARIANT = _str  HF_INDEX = hf_x509if_object_identifier_id  VAL_PTR = &actx->external.direct_reference

#.FN_BODY ContextProfile/contextValue/_item
  offset=call_ber_oid_callback(actx->external.direct_reference, tvb, offset, actx->pinfo, tree, NULL);

#.FN_PARS MatchingUse/restrictionType
  FN_VARIANT = _str  HF_INDEX = hf_x509if_object_identifier_id  VAL_PTR = &actx->external.direct_reference

#.FN_BODY MatchingUse/restrictionValue
  offset=call_ber_oid_callback(actx->external.direct_reference, tvb, offset, actx->pinfo, tree, NULL);

#.FN_BODY AttributeTypeAndDistinguishedValue/valuesWithContext/_item/distingAttrValue
  offset=call_ber_oid_callback(actx->external.direct_reference, tvb, offset, actx->pinfo, tree, NULL);

#.FN_BODY RelativeDistinguishedName
  char *temp_dn;

  rdn_one_value = FALSE;
  top_of_rdn = tree;
  last_rdn = (char *)wmem_alloc(wmem_packet_scope(), MAX_DN_STR_LEN); *last_rdn = '\0';
  register_frame_end_routine (actx->pinfo, x509if_frame_end);

  %(DEFAULT_BODY)s

  /* we've finished - close the bracket */
  proto_item_append_text(top_of_rdn, " (%%s)", last_rdn);

  /* now append this to the DN */
  if (last_dn) {
    if(*last_dn) {
      temp_dn = (char *)wmem_strdup_printf(wmem_packet_scope(), "%%s,%%s", last_rdn, last_dn);
      last_dn[0] = '\0';
      g_strlcat(last_dn, temp_dn, MAX_DN_STR_LEN);
    } else {
      g_strlcat(last_dn, last_rdn, MAX_DN_STR_LEN);
    }
  }

  last_rdn = NULL; /* it will get freed when the next packet is dissected */

#.FN_BODY RelativeDistinguishedName/_item

  if(!rdn_one_value) {
    top_of_rdn = tree;
  } else {

   if(last_rdn)
     /* this is an additional value - delimit */
     g_strlcat(last_rdn, "+", MAX_RDN_STR_LEN);
  }

  %(DEFAULT_BODY)s

  rdn_one_value = TRUE;

#.FN_BODY RDNSequence
  const char *fmt;

  dn_one_rdn = FALSE; /* reset */
  last_dn = (char *)wmem_alloc(wmem_packet_scope(), MAX_DN_STR_LEN); *last_dn = '\0';
  top_of_dn = NULL;
  register_frame_end_routine (actx->pinfo, x509if_frame_end);


  %(DEFAULT_BODY)s

  /* we've finished - append the dn */
  proto_item_append_text(top_of_dn, " (%%s)", last_dn);

 /* see if we should append this to the col info */
  if((fmt = val_to_str_const(hf_index, fmt_vals, "")) && *fmt) {
      /* we have a format */
	col_append_fstr(actx->pinfo->cinfo, COL_INFO, " %%s%%s", fmt, last_dn);
  }


#.FN_BODY RDNSequence/_item

  if(!dn_one_rdn)  {
    /* this is the first element - record the top */
    top_of_dn = tree;
  }

  %(DEFAULT_BODY)s

  dn_one_rdn = TRUE;

#.FN_BODY AttributeValueAssertion

	ava_hf_index = hf_index;
	last_ava = (char *)wmem_alloc(wmem_packet_scope(), MAX_AVA_STR_LEN); *last_ava = '\0';
	register_frame_end_routine (actx->pinfo, x509if_frame_end);

	%(DEFAULT_BODY)s

	ava_hf_index=-1;

#.FN_BODY Attribute
	doing_attr = TRUE;
	register_frame_end_routine (actx->pinfo, x509if_frame_end);

	%(DEFAULT_BODY)s
#.END